{"id":1751900,"url":"https://alion.io/job/bdo-usa-identity-access-management-engineer","title":"Identity Access Management Engineer","company":{"id":720,"name":"BDO USA","domain":"bdo.com","url":"https://alion.io/company/bdo-usa","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":84,"open_postings":123,"ghost_share":0,"stale_share":0.821,"repost_share":0.016,"time_to_fill_p50_days":3,"computed_at":"2026-10-10T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Columbus, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":85000,"max":105000,"currency":"USD","period":"year","gross":null,"usd_annual":105000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"ServiceNow","optional":false},{"name":"SOC 2","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-02T19:36:29Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-12T03:36:10Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"Job Summary:\nThe Identity Access Management Engineer.is responsible for administering and enhancing identity and access management processes that support secure, compliant access to Firm systems, applications, and data. This role executes user provisioning, deprovisioning, access reviews, role maintenance, and documentation activities in accordance with Firm policies and security standards. The position exercises discretion and independent judgment when evaluating access requests, resolving exceptions, identifying control gaps, and recommending process improvements. This role partners with Information Technology, People & Culture, Compliance, the Office of the CISO, the Office of General Counsel, and business stakeholders to maintain appropriate access controls, protect confidential information, and support operational and regulatory requirements. The position may require occasional alternative schedules, on-call support, weekend work, and moderate travel.\nJob Duties:\nAdministers user access to internal and external systems, applications, and network-based resources\nReviews, approves, coordinates, and completes provisioning, modification, and deprovisioning activities in accordance with Firm policies, access standards, and security requirements\nEvaluates access requests and exceptions using discretion and independent judgment to ensure appropriate authorization, segregation of duties, and least-privilege access\nPrepares and maintains documentation for operating standards, access standards, policies, and system access guides and procedures\nIdentifies process gaps and control weaknesses and develop improvements for granting, modifying, and revoking access\nPerforms periodic audits and access reviews to confirm compliance with approved access models, internal controls, and Firm requirements\nDevelops and maintain access guides for applications supported by the Identity Access Management function and validate access configurations through testing\nTests and supports identity and access management provisioning tools and related workflows\nMaintains and updates business rules, role structures, and automation logic within IAM tools\nValidates approvals, business justification, and supporting documentation before granting or modifying access\nDetermines whether requested access aligns with least-privilege principles, segregation of duties requirements, and established security standards\nAssesses access-related risk considerations and identify exceptions before permissions are granted or modified\nDevelops and maintains IAM policies, access standards, onboarding requirements, and governance documentation for applications introduced into the environment\nPartners with project teams, vendors, and business stakeholders to define identity lifecycle requirements, access models, provisioning methods, and ongoing governance controls for new applications\nDesigns, configures, and maintains automated provisioning workflows, exception handling processes, and identity lifecycle automation within IAM tools\nManages identity and access administration activities for assigned business domains, including evaluating access requirements, validating approvals, and ensuring compliance with applicable security and regulatory requirements\nApplies technical expertise, risk assessment, and decision-making in support of the Firm’s security and compliance objectives\nCompletes assigned work items, service requests, and queue responsibilities within established service levels\nOther duties as required\nSupervisory Responsibilities:\nN/A\nQualifications, Knowledge, Skills and Abilities:\nExperience:\nThree (3) or more years of experience in identity access management, information security administration, or access governance, required\nExperience administering user lifecycle processes, including provisioning, deprovisioning, transfers, and access reviews, required\nExperience supporting regulated or highly controlled environments involving confidential or protected information, required\nUnderstanding of authentication protocols, such as SAML 2.0 or OAuth/SSO, required\nExperience with implementing automated provisioning of end-point by using custom provisioning flows, SCIM, API, or JIT, required\nExperience with ISO 20071, QC-1000, SOC2 frameworks and controls, preferred\nExperience identifying process improvements and implementing access control enhancements, preferred\nLicense/Certifications:\nMicrosoft identity or Azure security certification, required\nActive Directory administration training or certification, required\nCertified Identity Access Manager (CIAM), preferred\nSoftware:\nWindows Active Directory Administration, required\nMicrosoft Entra ID, required\nServiceNow, required\nMicrosoft 365 Admin, preferred\nWorkato provisioning tools, preferred\nLanguage:\nN/A\nOther Knowledge, Skills & Abilities:\nStrong verbal and written communication skills\nExcellent interpersonal and customer relationship skills\nCapacity to work in a deadline-driven environment while handling multiple complex projects/tasks simultaneously with a focus on details\nCapable of successfully multi-tasking while working independently or within a group environment\nAbility to rely on extensive experience and judgment to plan and accomplish goals\nCapable of working well under pressure while dealing with unexpected problems in a professional manner\nCapacity to communicate and interact with all levels of employees and management\nAbility to interact and build relationships and consensus among people\nAdvanced knowledge and understanding of Firm standard applications and all aspects of the desktop environment\nCapacity to effectively instruct end users in the use of equipment and/or software by providing advice regarding policies and procedures \nAbility to research and resolve problems, acquire and maintain knowledge of relevant software solutions, and support firm policies and procedures\nAbility to travel for Firm business on a moderate basis\nIndividual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate’s qualifications, experience, skills, and geography.\nNational Range: $85,000 - $105,000\nMaryland Range: $85,000 - $105,000\nNYC/Long Island/Westchester Range: $85,000 - $105,000","description_format":"text","description_chars":6278,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Professional Services","Financial Advisory, Valuation & Restructuring","Nonprofits & Foundations"],"lifecycle":[{"event":"open","at":"2026-10-03T09:11:55Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.303,"p_room":0.35,"age_days":7,"expected_fill_days":3,"reasons":["conf:0","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-10T05:45:15Z"},"pay":{"stated_usd_annual":105000,"is_top_pay":false},"html_url":"https://alion.io/job/bdo-usa-identity-access-management-engineer","json_url":"https://alion.io/job/bdo-usa-identity-access-management-engineer.json","meta":{"generated_at":"2026-10-12T04:51:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7562,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":720},"rest":"https://alion.io/mcp/rest/get_company?id=720"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbdo-usa-identity-access-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbdo-usa-identity-access-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbdo-usa-identity-access-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bdo-usa-identity-access-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbdo-usa-identity-access-management-engineer"}]}